Technical Information
Modifies file system
Creates the following files
- <Current directory>\ygcrhnnfik.exe
- <Current directory>\idspdpqmxi.exe
- <Current directory>\fabqnmprkj.exe
- nul
- <Current directory>\celrxjgopl.exe
- <Current directory>\fwqdkiiopw.exe
- <Current directory>\gdckefsewm.exe
- <Current directory>\mfjjkfmpyl.exe
- <Current directory>\mnnpncexfj.exe
- <Current directory>\mcywhaonly.exe
- <Current directory>\gwnszxmhxm.exe
- <Current directory>\arugqttujh.exe
- <Current directory>\wwdhaqkzwj.exe
- <Current directory>\anrbnpmzwu.exe
- <Current directory>\dfwnjnosex.exe
Deletes the following files
- <Current directory>\ygcrhnnfik.exe
- <Current directory>\idspdpqmxi.exe
- <Current directory>\fabqnmprkj.exe
- <Current directory>\celrxjgopl.exe
- <Current directory>\fwqdkiiopw.exe
- <Current directory>\gdckefsewm.exe
- <Current directory>\mfjjkfmpyl.exe
- <Current directory>\mnnpncexfj.exe
- <Current directory>\mcywhaonly.exe
- <Current directory>\gwnszxmhxm.exe
- <Current directory>\arugqttujh.exe
- <Current directory>\dfwnjnosex.exe
- <Current directory>\wwdhaqkzwj.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\ygcrhnnfik.exe'
- '<Current directory>\idspdpqmxi.exe'
- '<Current directory>\fabqnmprkj.exe'
- '<Current directory>\celrxjgopl.exe'
- '<Current directory>\fwqdkiiopw.exe'
- '<Current directory>\gdckefsewm.exe'
- '<Current directory>\mfjjkfmpyl.exe'
- '<Current directory>\mnnpncexfj.exe'
- '<Current directory>\mcywhaonly.exe'
- '<Current directory>\gwnszxmhxm.exe'
- '<Current directory>\arugqttujh.exe'
- '<Current directory>\wwdhaqkzwj.exe'
- '<Current directory>\anrbnpmzwu.exe'
- '<Current directory>\dfwnjnosex.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HEFNQKIILY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QUSWROUYBH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DFWNJNOSEX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ANRBNPMZWU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WWDHAQKZWJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ARUGQTTUJH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GWNSZXMHXM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MCYWHAONLY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MNNPNCEXFJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MFJJKFMPYL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GDCKEFSEWM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FWQDKIIOPW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CELRXJGOPL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FABQNMPRKJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IDSPDPQMXI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YGCRHNNFIK.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XOAVXNOKDY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KVLZDIKJUK.exe"
